SAP is facing a security investigation after one of its four missing solid-state drive (SSD) disks was found on eBay, where it was purchased by an SAP employee.
The disks went missing from its datacenter in Walldorf, Germany, in November of last year, and it contained personal records of over 100 SAP employees.
An investigation showed there were no physical checks on people leaving the datacenter, which was described as a secure location. The disks were moved to an unsecured building in the HQ complex and from there they were stolen. The whereabouts of the three remaining disks are unknown to SAP.
This is the fifth time in the past two years that disks have gone missing from SAP’s European datacenters. The company has assured customers that the currently recovered disks did not contain any personally identifiable information (PII) or confidential customer data.
The sources for this piece include an article in TheRegister.
